IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-10 08:16

MODIFIED

2026-07-10 08:16

EPSS (Prob. Exploit)

0.68%

Top 48.0%

DATA SOURCES:

NVD 🔗 2026-07-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication Accepts Stale Cached Credentials This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-294 CWE-613

> CWE DETAILED DESCRIPTIONS

CWE-294: Authentication Bypass by Capture-replay - A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). | CWE-613: DEPRECATED: Insufficient Session Expiration - This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants.

> HISTORIQUE DES MODIFICATIONS

Première apparition

10/07/2026 08:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

Nouvelle valeur:

📊 ENRICHISSEMENT 01/08/2026 06:01

CWE